Sigstore: Project yekuvandudza yakavhurwa sosi yekupa cheni
Nhasi, tichataura nezvazvo "Sigstore". Imwe yevakawanda, ye mapurojekiti emahara uye akavhurika pasi pekudzidziswa kweiyo Linux Foundation.
"Sigstore" Icho chaicho chirongwa chakagadzirwa kupa isingabatsiri yeruzhinji sevhisi sevhisi, ku kunatsiridza cheni yekutengesa de open source software kufambisa kubvumidzwa kwesoftware cryptographic siginecha inotsigirwa neyakajeka kunyoresa matekinoroji.
"Sigstore", Haisiriyo yega Linux Foundation chirongwa iyo yatakataura nezvayo pazviitiko zvakapfuura. Mumwe wavo anga ari ZveMotokari Giredhi Linux, iyo yatinotsanangura panguva yacho seinotevera:
"YeMotokari Giredhi (Hunhu) Linux yakavhurika sosi yekubatira chirongwa chiri kuunza pamwechete vagadziri, vatengesi uye makambani eetekinoroji kuti akurumidze kuvandudza uye kugashira yakazara yakavhurika software stack yemota yeramangwana. Iine Linux pamucheto wayo, AGL iri kuvandudza chikuva chakavhurika kubva pasi kumusoro iyo inogona kushanda seye de facto indasitiri standard kuti ikwanise kukurumidza kukurumidza kwezvinhu zvitsva uye matekinoroji." Linux Foundation: Ipa paVashandisi veMagetsi Ratidza 2020
Gare gare, mune ramangwana zvinyorwa tichazotaura nezve mamwe mapurojekiti, asi kune avo vanoshuvira kuongorora mamwe acho vari vega, vanogona kuzviita kuburikidza neiyi inotevera link. Linux Foundation mapurojekiti.
Sigstore: Chirongwa cheLinux Foundation
Chii chinonzi Sigstore?
Maererano naye Sigstore yepamutemo webhusaitizvakafanana:
"Chirongwa chakagadzirwa nechinangwa chekupa isingabatsiri yeruzhinji sevhisi yekuvandudza iyo yakavhurwa sosi software yekupa cheni nekufambisa kugamuchirwa kweiyo software cryptographic siginecha, inotsigirwa neyakajeka kunyoresa matekinoroji. Uye zvakare, inoedza kudzidzisa vanogadzira software kuti vasaine zvakachengeteka software zvigadzirwa sekuburitsa mafaera, mifananidzo yemidziyo, mabhainari, bhiri yezvinhu zvinoratidzira, uye nezvimwe."
Uye zvakare, chirongwa ichi chinotsvaga kuona kuti:
"Izvo zvakasainwa zvinhu zvinochengeterwa tamper-proof yeruzhinji rekodhi."
Nei Sigstore yakakosha?
Iyi purojekiti, zvishandiso uye nhengo, inotsvaga kudzivirira «kurwiswa pane software yekupa cheni », senge, chii chakaitika na SolarWinds uye vamwe vanozivikanwa munguva pfupi yadarika.
"Microsoft yakati vatengesi vakanganisa SolarWinds 'Orion kuongorora uye manejimendi software, ichivabvumidza kuteedzera chero aripo mushandisi neakaundi musangano, kusanganisira maakaunzi akakudzwa. Russia inonzi yakashandisa zvidimbu zvemaketeni ekutenga kuti vawane masisitimu ehurumende."
Kunzwisiswa na «kurwiswa kweiyo software yekutengesa » kune chiito icho, Anobira anoisa kodhi yakaipa mune software yepamutemo kuti aipararire kwese kwese.
Nekudaro, emahara / akavhurika mapurojekiti emahara uye ari nyore kuita, akadai se "Sigstore" zviri kuwedzera kudiwa muzuva redu.
Nzira yekudzivirira sei kurwiswa pane software yekupa cheni?
Kunyangwe, pane dzimwe nguva, isu takapa rinobatsira ruzivo chengetedzo kuraira, inoshanda kune wese munhu uye chero nguva kana mamiriro, iwo matipi anotevera anotarisana zvakanangana nekudzora urwu rudzi rwekurwisa zvakanyanya sezvinobvira:
- Chengetedza huwandu hwese wega uye wechitatu-bato software maturusi, ese emahara uye akavhurika, uye ehupfumi uye akavharwa, ayo anoshandiswa.
- Iva nekuteerera kune anozivikanwa uye emangwana kushomeka, kwemaitiro ese uye masisitimu anoshandiswa, kunyorera nekukurumidza sezvinobvira zvigamba zvinowanikwa zviri pamutemo.
- Gara uchiziva nezvekutyora kwakaonekwa kana kurwiswa kunoitwa, kuve neyako neyechitatu-bato software vanopa, kudzivirira kushamisika kusingatarisirwe nenzira idzi.
- Bvisa munguva ipfupi inogoneka, iwo masisitimu, masevhisi uye maprotocol anogona kuve akawandisa (asina basa) kana apera (asina kushandiswa).
- Ronga uye shandisa nzira dzekubatana uye zvekuchengetedza zvinodiwa nevako vanopa software, kuti uderedze njodzi yeIT kubva kwavari uye neyako nzira dzekuchengetedza.
- Mhanya akajairwa kodhi odhita. Uye chengeta yakagadziridzwa yekuchengetedza ongororo uye shandura maitiro ekudzora, anodikanwa kune chimwe nechimwe chikamu chekodhi yakagadzirwa kana kushandiswa.
- Ita tsika yekupinda bvunzo kuti uone njodzi dzinogona kuitika pane yako komputa chikuva.
- Shandisa matanho ekuchengetedza IT akadai sekudzivirira kwekuwana uye kaviri factor (2FA) kuchengetedza zvirongwa zvekuvandudza software.
- Mhanya software yekuchengetedza ine akawanda matete ekudzivirira. Kunyanya zvinopesana nekupinda mukati, hutachiona uye rasomwares, zvakajairika mazuva ano.
- Chengetedza rako rekuchengetedza kana rezvirongwa kuronga kusvika pari zvino, kuitira kuti chengetedza zvakachengetedzeka iro rakakosha dhata rezvishandiso, masisitimu uye zviitiko (maitiro), uye ugone kudzoreredza chero chazvo, munguva ipfupi inogoneka.
Zvimwe pamusoro sigstore
Pakupedzisira, ivo vanogadzira "Sigstore" vanotsanangura zvishoma mashandiro eprojekti iyi nenzira inotevera:
"sigstore inoshandisa zviripo x509 PKI matekinoroji uye pachena marejista. Vashandisi vanogadzira epfupi ephemeral makiyi maviri maviri vachishandisa sigstore mutengi maturusi. Iyo sigstore PKI sevhisi inozopa chitupa chekusaina chakagadzirwa mushure mekubudirira OpenID kubatanidza kupihwa. Zvese zvitifiketi zvakanyorwa mune setifiketi pachena kusarejista uye software kusaina zvinhu zvinoendeswa kune siginecha kujekesa registry."
"Kushandisa pachena marekodhi kunounza mudzi wekuvimba muakaundi yeOpenID account. Nekudaro isu tinogona kuve nemavimbiso ekuti mushandisi anonzi ndiye aive ari mukutonga kweakaundi yeanopa sevhisi panguva yekusayina. Kana iko kusaina kwapera, makiyi anogona kuraswa, kubvisa chero chinodiwa chekuwedzera kiyi manejimendi kana kudiwa kwekubviswa kana kutenderera."
Kuti uwane rumwe ruzivo pamusoro "Sigstore" unogona kushanyira yako yepamutemo webhusaiti paGitHub uye iyo Nharaunda (Boka) yeruzhinji about Google.
Resumen
Tinovimba izvi "inobatsira shoma posvo" about «Sigstore», chirongwa chinonakidza uye chinobatsira cheiyo Linux Foundationzvinova a pachena basa uye software siginecha yeruzhinji zvakanaka uye isiri-purofiti, yakagadzirirwa iyo kunatsiridza cheni yekutengesa open source software; ive yekufarira kukuru uye yekushandisa, yeiyo yese «Comunidad de Software Libre y Código Abierto» uye yemupiro mukuru mukupararira kweinoshamisa, hombe uye kukura ecosystem yezvishandiso zve «GNU/Linux».
Parizvino, kana iwe waifarira izvi publicación, Usamire igovera nevamwe. teregiramu, Chiratidzo, Mastodon kana imwe ye Fediverse, ndoda.
Uye yeuka kushanyira peji redu repamba pa «DesdeLinux» kuti uongorore dzimwe nhau, pamwe nekujoinha chiteshi chedu chepamutemo che Teregiramu ye DesdeLinux. Nepo, kuti uwane rumwe ruzivo, iwe unogona kushanyira chero Raibhurari yepaindaneti Chemhondoro OpenLibra y jedit, kuwana uye kuverenga mabhuku edhijitari (maPDF) panhau iyi kana mamwe.